Question 1
A [script://] input sends data to a Splunk forwarder using which method?
Question 2
A new search head cluster is being implemented. Which is the correct command to initialize the deployer node without restarting the search head cluster peers?
Question 3
A customer wants to implement LDAP because managing local Splunk users is becoming too much of an overhead. What configuration details are needed from the customer to implement LDAP authentication?
Question 4
Which statement is true about subsearches?
Question 5
As data enters the indexer, it proceeds through a pipeline where event processing occurs. In which pipeline does line breaking occur?
